You cannot hire your way to the eleventh client.
You hold the finance seat at several companies at once, and the constraint is you. Every engagement is another close, another reporting pack, another set of logins and the same brain. And every engagement ends — handover is part of what you sell, not an afterthought at the end of it.
The modules that matter when the entities are other people’s companies
Each one runs a real workflow, in the order it runs. The point of all of them is the same: the tenth engagement runs like the first, without a tenth of you.
Every client gets the same pack on the same schedule, built the same way.
The cash call you are actually hired for stops taking a morning per client.
You read exceptions instead of registers, and you catch the duplicate payment in week one.
Your exit is a document, not three weeks you cannot bill.
A contract can inform the system. It cannot instruct it.
One place that says which client needs you today.
You can price an engagement knowing what running it costs.
Modules you do not need are switched off rather than shipped as clutter. What each one does for your book of clients — their entities, calendars, charts of accounts and approvers — is configured during the build, against their books.
One rule holds across every workflow above
The AI retrieves, analyses, drafts and proposes. Deterministic code calculates and checks. An authorised person approves anything that reaches the ledger. There is no unsupervised posting, and no setting that turns it on.
Four-tier action gate
Every action is classified into exactly one side-effect tier. Ledger and customer-facing writes are proposal-first, human approval only. An unrecognised action fails closed into the most-gated tier.
Preparer and approver
Review policy set per entity, with role floors and per-check materiality overrides, and separate preparer and approver roles wherever the control requires segregation.
Readable proposals
Each proposal carries before and after, its source data, risk level, the role required to approve it, a content fingerprint, an expiry, and its execution record.
One audit chain
The prompt, the run, each tool call, the proposal, the approval or rejection, the sync — recorded as one chain you can walk backwards.
Circuit breaker
When a task’s accuracy degrades, the system revokes that task’s autonomy and alerts. It can only demote. It can never promote itself.
Grounded answers
Answers cite period, basis, source reference and sync timestamp. Prose claims are verified against facts captured at the tool boundary; anything unverified is marked.
Five rungs. You can stop after any of them.
The Run is monthly; nothing else here is. Nothing renews against your will, nothing commits you to the next rung, and each one ends with something written down that you keep — the last of them the source itself.
The Handover Test
Pick the engagement you would least like to lose and answer six questions about what happens to it if you stop on Friday. The work only you can do is not leverage — it is the reason there is no room for an eleventh client.
The Close Teardown
Not a demo and not a discovery call. You bring your close — the checklist, the calendar, the entity you argue with most — and we go through it together.
The Pilot
Pick the process that costs you the most every month — the intercompany reconciliation, the flux commentary, the board pack, the covenant certificate. We run it. Not a report about running it: the thing itself, on your calendar, against your books, delivered in the month you would have delivered it anyway.
The Run
We keep running it, then the second process, then the third. An evidence pack every close — what ran, what it proposed, who approved it, what changed. The second process costs less than the first, because the control layer it needs is already standing.
The Handover
The Handover Test named what a successor could not do. This is where that stops being true: after a year of it running, the engagement comes with the source, the training, and support while whoever takes it settles in.
If you would rather own it outright from the start, we build it that way instead — scoped against what your close actually is, so it carries no published price. Most people do not start there. The teardown is where you find out whether you should.
Find the layer that is least ready to carry it.
Twelve questions across six control layers. About six minutes, and the result stays on your screen — sharing it is optional.